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Overview 

• AFRT and recent developments 

• Provisions for collection of biometric information at the border 

• AFRT and even more recent developments 

• What’s coming next? 

- Second generation behavioural biometrics 

- Deception and ‘malintent’ / identification 

• Privacy protections? 

• Issues and concerns 

• Thinking about regulation 




AFRT - the basics 


• Automated extraction, 
digitisation and 
comparison 

• Automated sorting, 
storage, sharing, 
integration 

• One-to-one matching 

• One-to-many searching 


HOW 20 FACIAL SCANNERS RECORD IDENTITIES 



Points are transferred 

Scanner starts reading to a database as an 
geometry or taco plotting akjontfim of numbers 
features on a grid 



® 

Comparisons can 
be made quickly by 
a computer program 
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Once a match is 
found an identity 
can be verified 
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Applications 

• Identification 
verification 

■ Database search 

■ Images sourced from 
Internet, including 
social media 

- Link to other ‘big 
data’ 

- SOCMINT 

■ ‘Smart’ CCTV 

• Border control 


■mchpp 
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AUTOMATED FACIAL RECOGNITION TECHNOLOGY: 
RECENT DEVELOPMENTS AND APPROACHES TO 
OVERSIGHT 


MONIQUE MANN 1 * AND MARCUS SMITH” 


I INTRODUCTION 

There has been a rapid expansion in the type and volume of information 
collected for securin' purposes following the tenorist attacks on the United States 
of America (‘US') on 11 September 2001 This event has been described as 
precipitating a program of ‘globalized surveillance'. 1 New technology, biometric 

identification and other developments such as metadata retention can provide 
governments with an increasingly comprehensive picture of citizens' lives. This 
has resulted in a rapidly expanding use of human biometric information in law 
enforcement investigations and other applications* 3 The first pan of this article 
describes Automated Facial Recognition Technology CAFRT*) and its law 




Provisions for collection of biometric 
information at the border 


• Migration Legislation Amendment (Identification and 

Authentication) Act 2004 (Cth) 

• Authorised the collection of ‘personal identifiers’ from non- 
citizens in visa application process and in the course of 
immigration clearance 

• Australian Passports Act 2005 (Cth) 

- Introduced biometric passports 

- s47(1()(a) Minister of Foreign Affairs may specify methods 
(including technologies) that are to be used for the purposes 
of confirming the validity of evidence of the identity of an 
applicant for an Australian travel document or person to 
whom an Australian travel document has been issued 
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Provisions for collection of biometric 
information at the border 


♦ Counter- Terrorism Legislation Amendment (Foreign Fighters) Act 
2014 (Cth) 

- extended the collection of personal identifiers to Australian citizens 
entering or leaving the country 

• Migration Amendment (Strengthening Biometrics Integrity) Act 2015 
(Cth) 

- Non-citizens and citizens to be required to provide personal 
identifiers 

- Consolidated seven previous provisions into a broad, discretionary 
power to collect one or more personal identifiers 

- Criticized by stakeholders due to breadth of discretionary power to 
collect biometric information, including from children without 
parental consent 
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NFBMC 


Phase 1 face verification service (FVS, one- 
to-one confirmation) operational in November 
2016 

Face identification service to identify 
unknown persons through one-to-many 
searching is expected to become operational 
in 2017 

Operate as a ‘hub’ 

- Outside of legislative framework 
Participating agencies: 

- DFAT (passports) 

- 01 BP (visa) 

- Federal police and intelligence agencies 

- Expanding access / scope creep eg DTA 
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Facial recognition, fingerprints to replace 
passports at Australian airports under new 
self-processing system 


By political reporter Alexandra Seech 
Posted 22 Jan 201 7, 3:25pni 

New technology will mean many travellers will 
soon not need to present their passports when 
entering or leaving Australia, 

The Department of Immigration and Border 
Protection is seeking lenders for a sett-processing 
system to be introduced later this year. 

The system will use fingerprints, iris or facta I 
structure recognition at major air and sea ports. 

Immigration Minister Peter Dutton said the aim was 
for more than 90 per cent of passengers to avoid 
paperwork or manual processing by staff. 

‘In many cases that win mean people, whilst they'll 
still have to carry their passport, may not have to 
present their passport at all in the long term," Mr 
Dutton said. 



photo: The new technology aims, to make travel >ig in end out 
of Austral easier. (ABC New* Me MkBmhi) 

delated STOW: Governments facial recognition system 
spanks privacy concerns 

MAP: Australia O 
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Facial recognition software trials in Queensland 
alarm privacy advocates 


Thu World Today ay Annie Quasi 

Updated 10 Mar 2017. 2:57pm 

A facial recognition technology trial is 
underway in Queensland, alarming privacy 
advocates who fear such developments could 
lead to bigger databanks of stored personal 
Information, 

The Toowoomba Regional Council has begun 
trialling the software called iOmniscient on behalf 
of the Brisbane, Gold Coast and other councils, 

iOmniscient works by analysing images recorded 
by existing CCTV cameras. 

A rollout of similar software has been supported by 
the Federal Government for passport processing in 
Australia, and the Northern Territory police are 
already using something similar. 

Monique Mann, a law lecturer at the Queensland 
University of Technology and member of the 
Australian Privacy Foundation, said the 
Toowoomba Council's decision was alarming 



PHOTO: The new software analyses CCTV images from 
existing cameras in lha area 
(ASC r+*w». jkwdam Hwyn#, Tib ptow) 

MAP: Toowoomba 4350 


Key points: 

* Similar software in use by NT Police, expected 
to be rolled out in airports 

• Toowoomba Council says it has not talked 
about using the software on streets 
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DFAT is building its own facial 
recognition system 


Prompted by biometrics 

8:55PM bOOm. 
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Australia's passport authority is building 
in-house a new system to handle its 
facial recognition operations in 
preparation for the high availability that 
will be required from two separate 

timiornmon t hinmotrirc initiatmac 
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National 


Facial recognition cameras on 
public transport in Gold Coast 
trial 

Charles Miranda. News Cor p Australia Network 
June 9. 2017 i2:3Gam 
+ Subscriber only 

EXCLUSIVE: Facial recognition technology is set to be deployed on 
the public transport network including trains, trams and buses at 
the Gold Coast Commonwealth Games next year, to identify 
potential terror suspects before they can get close to any sporting 
or public venue. 
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Biometrics back on DTA 
agenda 



Biometric identifier*; Stilt i it the Pigilat TracwforauHion Agrncy 

The Federal Government It running a private beta of its digital 
Identity platform ahead of a planned public test early newt year. 


Australian Gmernment 

Dipitiil Transformation Agency 


What we do who we are Digital Service Standard News Blog 

Hgm* whaewrdo ««tawn ■ Ocvpaw 


Govpass 

The DTA'$ Govpass project alms to make the process of 
proving who you are to government services online simple, 
safe and secure. 

Currency in Its beta stage of development, Govpass will offer users pulek 
and simple options no prove who they are. 

Users will be able to prove themselves by having an accredited organisation 
vouch lor them, such « a government agency, or In the future, even their 
own bank. 






What is next? 

• This is a fast moving field with constant developments 

• What can we expect next for biometrics at the border? 

- What technologies are being developed and 
implemented elsewhere? 

- What can we reasonably expect in Australia (with 
consideration of Australia’s unique domestic 
conditions and absence of constitutional protection of 
human / privacy rights) 

• What are the emerging issues? 

• What are possible regulatory responses? 
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Second generation behavioural biometrics 

• M u Iti- mod a I i nte g ration of bi o metric su rve i 1 1 a nee sy stem s , m ay i nc I ude : 

• Gait analysis 

• Voice recognition 

- Intonation to detect deception 

• Facial expressions 

- Eye movement 

- Emotion {eg advertising) 

• Somatic indicators of stress and anxiety 

- Blood pressure, pulse, respiration, thermal 

• Second generation / soft / behavioural biometrics {compared with first 
generation) 

- Increased prospects for error 

- Issues of inference {eg of emotions and mal/intent) 

- More easily ‘spoofed’ 
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Deception Detection & Interrogation 

• Automated Virtual Agent for Truth 
Assessment in Rea! time 
(AVATAR) 

-Eye-tracking, voice intonation, 
emotion recognition 

• Robot/ Al enhanced 
interrogation 

- Predictive questioning 

- Data matching across 
information systems 
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Mal/intent and threat identification 


• ‘Behaviour Detection Officers’ trained to identify risky 
people in the Screening of Passengers by Observation 
Techniques program (SPOT) (pre-cursor to FAST) 

• Collect psycho-physiological data that is meant to indicate 
a person has hostile intentions 

• Aim to identify people who are thinking of or planning 
future offences in public spaces, such as an airport or 
event 

• Direct people to walk through screening units and ask 
questions such as “ are you attempting to smuggle an 
explosive device into the airport today?" or show image of 
an explosive device to elicit response 
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Homeland Innovative Prototype Solutions 


Future Attribute Screening Technology Mobile Module 
(FAST M 2 ) 



Systems 

- Queue management 

* Behavioral identification 

* Rapid nsK assessment 

- Screening methodologies 


Operational Characteristics F unct io n s 

-Discover screening methods for intent • Attribute measurement 

-Avoids All Privacy Issues - Re* deiemnnalion 

-Simple to operate and use * Bohawor focused screening 



Homeland 

Security 
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Privacy protection? 

• Privacy Act 1988 (Cth) 

- Australian Privacy Principles (APPs) 

- Sensitive information'. ‘Biometric information that is to be used 
for the purposes of automated biometric verification or biometric 
identification’ and ‘biometric templates’ 

• Exemptions to Privacy Act 1988 (Cth) for enforcement agencies 

• No constitutional protection of human rights 

• No privacy tort 

• No relevant jurisprudence (c.f. UK cases S & Marper, RMC & FJ, 
Wood where collection / retention of biometric information of those 
who have not been convicted of a criminal offence found to violate 
Art. 8 of ECHR) 
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Issues and concerns 


• Automated systems of identification and mal/intent / deception 
detection 

- Black-box decision making with humans removed from process 

- Questionable notions of ‘objectivity’ 

- Transparency - cf trade secrets- algorithms 

• Little, if any, limits on data collection and use by border control agents 

• Problematic pre-crime applications / foreknowledge 

- Making future inferences of mal/intent from psycho-physiological 
data 

- ‘Reasonable’ suspicion and due process, presumption of innocence 

- Right to silence, privilege not to self-incriminate and parameters of 
legitimate search (cf robot enhanced interrogation or threat 
identification) 




Thinking about regulation 


• Biometrics Commissioner as per UK model, increased 
oversight 

• Limits on broad discretionary / ministerial powers, particularly 
in context of migration / at the border 

• Transparency and audits of systems and databases including 
records / biometric templates stored 

• Meaningful consultation with civil society and robust PIA 

• Human rights based legislative framework 

- But for this to occur there needs to be broader human 
rights and privacy reform, particularly in Australia 

- Issues of balancing - rhetoric of balancing security with 
human rights 
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Possible limits / purpose specificity? 

• Limiting the retention of biometric information to purpose and then 
requiring destruction: 

- For example Counter-Terrorism and Other Legislation Amendment 
Bill 2017 (QLD) introduces new biometric collection powers in an 
"emergency situation”: 

- If the commissioner is satisfied that a person’s biometric information 
taken under this section: 

(a) Is no longer required for the investigation or prosecution 
relating to an emergency; and 

(b) Is no longer required for an inquiry or inquest, or proposed 
inquiry or inquest, in relation to an emergency, including, for 
example, a commission of inquiry or an investigation under 
the Coroners Act 2003. 

- The commissioner must take reasonable steps to destroy the 
biometric information, and any data about the biometric 
information, held by the Queensland Police Service 
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Conclusion 

• Australia’s human rights framework poses challenges for 
the protection of individual rights 

- Privacy in public spaces? 

- Behavioural monitoring in public spaces? 

• Can we really ever consent / opt-out? 

- Outmoded concept of consent in increasingly 
connected censor society / also relevant to 
developments in loT and ‘smart cities’ 

— Refusal of entry / visa, also vulnerable groups like 
refugees and migrants 

• Issues expand with emerging technologies such as pre- 
emptive mal/intent / deception detection 
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Rout ledge 



• Forthcoming late 2017 / early 2018 

• Routledge Law, Science and 
Society series 

- DNA 

- Fingerprints 

- Facial recognition 

- Biometric futures 

• First generation 

• Second generation 

• Spoofing biometrics 

- Biometrics in criminal trials 

- Legal and regulatory issues 



Biometrics, Crime and Security 

Marcus Snnlh 
Mon bquo Mann 

Gregor UrtjJS 





Thank you! 

m6.mann@qut.edu.au 


